Lucene search
+L

7588 matches found

Kitploit
Kitploit
added 2026/09/01 10:30 p.m.3 views

FuguHub-8.1-Reflected-SVG-XSS-CVE-2025-65790

CVE-2025-65790 - FuguHub 8.1 SVG XSS Reflejado Cross-Site Scripting XSS Reflejado mediante Renderizado SVG en FuguHub https://vulners.com/cve/CVE-2025-65790 Este repositorio documenta una vulnerabilidad de Cross-Site Scripting XSS Reflejado en FuguHub 8.1 , donde los archivos SVG que contienen...

6.1CVSS5.9AI score0.0026EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/01 7:47 p.m.3 views

sigint

SIGINT Real-time OSINT dashboard with live aircraft, vessel, seismic, fire, weather, and event tracking on an interactive globe. Built with Bun, React 19, and a custom Canvas 2D + Web Worker rendering engine. Installable as a PWA. Screenshot Table of Contents SIGINT Screenshot Table of Contents...

5.9AI score
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/09/01 3:18 p.m.8 views

CVE-2026-84232 Pulpcore: python-pulpcore: stored cross-site scripting via inline rendering of uploaded html/svg content

A flaw was found in pulpcore's content serving application. Files uploaded to Pulp file-type repositories are served with their original content type e.g., text/html for .html files, image/svg+xml for .svg files and without a Content-Disposition: attachment header when using local filesystem...

5.4CVSS5.8AI score0.00176EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/01 9:04 a.m.6 views

CVE-2025-55182-Proof-of-Concept

CVE-2025-55182 Prueba de Concepto Este repositorio contiene una Prueba de Concepto PoC para CVE-2025-55182 , una vulnerabilidad que implica Contaminación de Prototipos que conduce a Ejecución Remota de Código RCE en ciertas implementaciones de renderizado del lado del servidor. ⚠️ Advertencia: Est...

10CVSS7AI score0.99802EPSS
SaveExploits389
Kitploit
Kitploit
added 2026/09/01 4:29 a.m.6 views

CVE-2025-57298

Stored XSS via Renderizado Inseguro de Markdown en Kotaemon Resumen Kotaemon es un sistema de preguntas y respuestas sobre documentos basado en RAG Generación Aumentada por Recuperación de código abierto que proporciona una interfaz web para consultar documentos subidos como PDF, Word y archivos...

5.8AI score
SaveExploits0
NVD
NVD
added 2026/08/31 4:19 p.m.12 views

CVE-2026-82805

A vulnerability was found in Typora up to 1.13.8/1.14.6. This vulnerability affects unknown code of the component Mermaid Rendering Engine. The manipulation of the argument classDef/style results in cross site scripting. The attack may be launched remotely. The exploit has been made public and...

5.3CVSS0.00282EPSS
SaveExploits0References7
EUVD
EUVD
added 2026/08/31 3:45 p.m.5 views

EUVD-2026-68614

A vulnerability was found in Typora up to 1.13.8/1.14.6. This vulnerability affects unknown code of the component Mermaid Rendering Engine. The manipulation of the argument classDef/style results in cross site scripting. The attack may be launched remotely. The exploit has been made public and...

5.3CVSS4.4AI score0.00282EPSS
SaveExploits0References7
CVE
CVE
added 2026/08/31 3:45 p.m.9 views

CVE-2026-82805

Typora (versions up to 1.13.8/1.14.6) is affected by a cross-site scripting (XSS) vulnerability in its Mermaid Rendering Engine . The flaw is triggered by manipulation of the classDef/style argument, and the attack can be launched remotely, though it requires user interaction (e.g., opening a cra...

5.3CVSS4.4AI score0.00282EPSS
SaveExploits0References7
Kitploit
Kitploit
added 2026/08/31 3:05 p.m.5 views

CVE-2022-30507-PoC

Description remote code execution RCE by executing javascript code - Cross-site-scripting XSSand rendering process by nodeintegration which is responsible for rendering process and accessing node js code PoC Video Reference...

5.9AI score
SaveExploits2
RedHat Linux
RedHat Linux
added 2026/08/31 2:32 p.m.8 views

golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via unexpected HTML tree rendering

A flaw was found in golang.org/x/net/html. This vulnerability allows an attacker to manipulate how HTML is processed and displayed. By providing specially crafted HTML, an attacker can cause an unexpected structure in the rendered output. This can lead to Cross-Site Scripting XSS attacks, where...

6.1CVSS6.2AI score0.00223EPSS
SaveExploits0References8
Kitploit
Kitploit
added 2026/08/31 1:08 p.m.4 views

CVE-2025-68116

CVE-2025-68116 लेखक: @x0root भेद्यता: ब्राउज़र में रेंडर होने योग्य अपलोड्स SVG / HTML के माध्यम से स्टोर्ड क्रॉस-साइट स्क्रिप्टिंग XSS प्रभावित सॉफ़्टवेयर: FileRise नोट: GHSA-qrcv-vjvf-fr29 ने एक शमन पेश किया था जो SVG को FileRise वेब UI प्रीव्यू पैन के अंदर रेंडर होने से रोकता...

8.9CVSS5.9AI score0.0026EPSS
SaveExploits1
Cvelist
Cvelist
added 2026/08/31 10:51 a.m.40 views

CVE-2026-82881 Aix-DB through 1.2.4 Stored Cross-Site Scripting via Markdown

Aix-DB through 1.2.4 renders markdown with raw HTML enabled into v-html bindings without sanitization, allowing stored cross-site scripting attacks. Attackers can inject malicious HTML and JavaScript through markdown content in chat responses, skill descriptions, or knowledge messages that execut...

5.4CVSS0.00188EPSS
SaveExploits0References6
CVE
CVE
added 2026/08/31 10:51 a.m.14 views

CVE-2026-82881

Aix-DB through version 1.2.4 is vulnerable to stored cross-site scripting (XSS) . The root cause is that markdown is rendered with raw HTML enabled and bound to v-html without sanitization (specifically in web/src/components/MarkdownPreview/plugins/markdown.ts). An attacker with low privileges ca...

5.4CVSS5.8AI score0.00188EPSS
SaveExploits0References6
OSV
OSV
added 2026/08/31 10:51 a.m.6 views

CVE-2026-82881 Aix-DB through 1.2.4 Stored Cross-Site Scripting via Markdown

Aix-DB through 1.2.4 renders markdown with raw HTML enabled into v-html bindings without sanitization, allowing stored cross-site scripting attacks. Attackers can inject malicious HTML and JavaScript through markdown content in chat responses, skill descriptions, or knowledge messages that execut...

5.1CVSS5.8AI score
SaveExploits0References8
NVD
NVD
added 2026/08/31 9:17 a.m.9 views

CVE-2026-82868

@pdfme/schemas before 5.5.9 contains a cross-site scripting vulnerability in the SVG schema plugin that renders user-supplied SVG content directly to innerHTML without sanitization. Attackers can inject malicious SVG with embedded scripts, event handlers, or foreignObject elements to execute...

6.1CVSS0.00155EPSS
SaveExploits0References2
CVE
CVE
added 2026/08/31 8:46 a.m.7 views

CVE-2026-82868

@pdfme/schemas versions before 5.5.9 contain a cross-site scripting (XSS) vulnerability in the SVG schema plugin . User-supplied SVG content is rendered directly to innerHTML without sanitization , allowing attackers to inject malicious SVG with embedded scripts, event handlers, or foreignObject ...

6.1CVSS6AI score0.00155EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/31 8:46 a.m.4 views

EUVD-2026-68403

@pdfme/schemas before 5.5.9 contains a cross-site scripting vulnerability in the SVG schema plugin that renders user-supplied SVG content directly to innerHTML without sanitization. Attackers can inject malicious SVG with embedded scripts, event handlers, or foreignObject elements to execute...

6.1CVSS6AI score0.00155EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/08/31 7:16 a.m.4 views

CVE-2025-55780

CVE-2025-55780 Null Pointer De-reference in MuPDF 1.26.4 EPUB Rendering Function CVE Reference - CVE-2025-55780 Affected Versions : 1.26.7 and before are affected Found and tested on : 1.26.4 Severity CVSSv3 score : 7.5 High Fixed in commit :...

7.5CVSS5.9AI score0.00428EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/08/31 5:26 a.m.3 views

CVE-2026-28496-Lab

CVE-2026-28496 - FOSSBilling Server-Side Template Injection in Twig Rendering Executive Summary This repository contains a local Docker lab for reproducing and validating CVE-2026-28496, a Server-Side Template Injection vulnerability affecting FOSSBilling's Twig template rendering behavior...

9.4CVSS5.8AI score0.01905EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/31 5:15 a.m.5 views

CVE-2026-999999

Portal X-Trading: Infraestructura Financiera Regional v1.4.2 Resumen Este repositorio contiene las configuraciones principales de distribución e implementación para el Portal X-Trading XTP , una solución contenerizada diseñada para servicios bancarios minoristas y de negociación de acciones. Esta...

5.9AI score
SaveExploits0
Rows per page
Query Builder